Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232322e3132382e302f32312d3234203d3e203134353933.roa
File:                     3134382e3232322e3132382e302f32312d3234203d3e203134353933.roa (raw, json)
Hash identifier:          TILZO3I+5ExbXhISCwE3E+eHtUkirRAdEZSnUAGcQeQ=
Subject key identifier:   03:A8:15:81:55:C3:57:D3:56:3B:FB:EC:29:7E:51:66:1F:D8:A5:A3
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       0AF96DCADAD05E6DC8B375933C57C86583EB77
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232322e3132382e302f32312d3234203d3e203134353933.roa
Signing time:             Tue 05 Mar 2024 17:59:05 +0000
ROA not before:           Tue 05 Mar 2024 17:54:05 +0000
ROA not after:            Tue 04 Mar 2025 17:59:05 +0000
asID:                     14593
IP address blocks:        148.222.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f9:6d:ca:da:d0:5e:6d:c8:b3:75:93:3c:57:c8:65:83:eb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Mar  5 17:54:05 2024 GMT
            Not After : Mar  4 17:59:05 2025 GMT
        Subject: CN=03A8158155C357D3563BFBEC297E51661FD8A5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:ff:89:42:6a:58:49:97:79:a9:f3:9a:72:
                    65:7c:57:0c:b1:3c:66:64:a6:87:c8:c7:3e:fa:f2:
                    48:91:2b:f7:e6:53:c6:0e:0b:42:79:9f:3a:35:18:
                    6d:be:33:a2:fd:0a:8e:33:b2:36:9a:c1:f0:f7:39:
                    03:66:43:8f:ba:74:b3:fa:5e:06:18:0e:ee:c8:ac:
                    f7:7c:41:8a:28:21:0b:a2:c0:1a:74:df:c9:1b:f0:
                    c8:d1:b6:10:73:aa:54:eb:1d:02:84:21:22:6a:86:
                    64:e2:31:46:c4:c7:f4:3c:ce:43:01:f1:46:a7:d6:
                    5e:28:1f:c9:de:45:ce:7d:54:9e:c9:80:96:f8:97:
                    28:00:1c:1a:50:84:49:93:c3:ec:ba:d6:bf:48:29:
                    9f:4d:10:45:bf:84:4d:bc:42:57:ea:b6:4f:2d:f1:
                    4f:32:c3:62:dd:97:42:9f:ff:d4:6c:36:da:fb:32:
                    f9:47:af:a3:71:d1:fe:9f:ab:4c:cf:64:4d:1d:23:
                    86:d8:7e:a2:8f:7b:cd:24:cb:53:18:b7:2a:8e:17:
                    5e:4a:29:84:fa:42:9c:02:43:06:a2:34:23:a8:d2:
                    e5:bd:cd:4c:8a:16:43:ff:7c:6e:fb:01:63:0b:c8:
                    d3:31:da:58:5d:36:01:ab:9a:eb:6f:92:89:2c:e2:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A8:15:81:55:C3:57:D3:56:3B:FB:EC:29:7E:51:66:1F:D8:A5:A3
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3134382e3232322e3132382e302f32312d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:7f:c1:48:d3:da:58:ed:ab:e5:e1:29:2e:f9:49:e4:09:8c:
         4f:a1:d5:bd:f3:b8:60:95:85:4e:61:30:e4:02:44:0c:d2:93:
         5b:39:a8:57:c0:1f:7b:0b:33:e4:a7:62:c9:45:76:ef:cf:34:
         ee:1b:12:40:4b:34:f7:71:db:79:fc:55:2b:b5:9a:c1:7d:a6:
         54:c8:95:5e:c9:a6:d4:e6:91:3d:28:e6:b6:75:26:0a:fc:3b:
         31:d6:c0:69:9b:dc:61:96:9e:20:28:f0:63:ec:3a:ea:4b:f5:
         32:a7:73:ac:18:bb:16:e2:9e:2d:cf:1d:10:5c:c9:f8:2b:61:
         f7:17:3a:df:cf:b2:91:ff:4a:75:0c:24:8f:19:5c:3f:07:88:
         a9:7c:fb:cc:be:bc:ae:24:91:bb:60:2e:34:e2:62:42:94:6d:
         c2:b8:1e:32:9c:66:f1:15:39:66:b9:60:49:a5:ed:01:28:7f:
         e1:20:7c:89:35:db:43:51:3a:67:96:4d:88:91:b2:e6:ba:3d:
         62:a2:cb:0f:e4:24:3c:78:75:28:45:63:5e:12:96:5d:1c:a7:
         45:c8:89:d8:32:5e:8d:e3:da:41:00:16:b8:15:8b:80:b5:5d:
         2a:d8:d6:9a:95:21:85:ac:55:78:41:ea:d9:e6:65:9d:88:b9:
         b3:22:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org